Intel

CVE-2022-21499

Dell ECS: Sicherheitsluecke

mediumEPSS 0.6%

Affected

  • Dell/ECS 3.8.1.0..*

Description

A flaw was found in the kernel/debug/debug_core.c in the Linux kernel in lockdown mode. This flaw allows an attacker with local access to trigger the debugger, bypass lockdown and write anonymously.

Source: BSI CSAFBSI WID Portalredhat_csafcvelistv5

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

DellECS
3.8.1.0

Metrics

XIEM Effective CVSS
6.7
Source: cna-v3
EPSS percentile
48.1 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
KEV status
—
Show all metrics
Severity
medium
Priority score
53.05
Exploit maturity
no public PoC known
CVSS v3
6.7
EPSS score
0.6 %
Low — model estimates < 1% exploitation likelihood.
Published
2022-06-09 20:15 UTC

References & sources